IPFire versions prior to 2.29 (Core Update 198) contain multiple stored cross-site scripting (XSS) vulnerabilities due to improper sanitization of user input in several CGI scripts. The cleanhtml() function fails to properly encode HTML entities before storing user-submitted data, allowing malicious scripts to be stored and executed in the web interface when viewed by other users.